aiqbench analysis
This research investigates how multi-agent systems degrade in accuracy when agents process benign but misleading context, finding that debate offers limited protection unless the majority of agents are misinformed. The study demonstrates that a simple prompt-level warning about unreliability is an effective, low-cost defense mechanism for restoring reasoning performance across commonsense and moral tasks. These findings highlight critical robustness challenges in deploying LLM-based agent swarms where information contamination occurs without adversarial intent.
Misinformation Propagation in Benign Multi-Agent Systems
arXiv:2606.16710v2 Announce Type: replace-cross Abstract: Multi-agent systems (MAS) are credited with solving complex problems, yet their agents routinely act on context that may be false. Prior work shows single LLMs are swayed by false context, and MAS can be compromised by adversarial agents persuading peers. We study the benign case: agents follow one protocol, none intends to deceive, but some read a misleading passage. We study it with MINT, 10,278 LLM-written misinformation passages in eight styles, testing three open-weight models on commonsense reasoning, knowledge QA, and moral judgment. A relevant false passage costs a single agent 0.12-0.43 accuracy; irrelevant or content-free passages typically cost at most 0.06. Debate looks robust because uninformed agents outnumber misinformed ones. With one of three misinformed, it is no better than choosing the majority over equally exposed independent samples. Interaction helps only with a misinformed majority, recovering up to 0.24 accuracy over voting (0.29 under consensus). A one-sentence unreliability warning recovers up to 0.18 accuracy under voting (0.28 under consensus), at no significant cost under voting when context is true. Robustness should be judged against exposure-matched baselines, with prompt-level skepticism as cheap first defense.
Abstract:Multi-agent systems (MAS) are credited with solving complex problems, yet their agents routinely act on context that may be false. Prior work shows single LLMs are swayed by false context, and MAS can be compromised by adversarial agents persuading peers. We study the benign case: agents follow one protocol, none intends to deceive, but some read a misleading passage. We study it with MINT, 10,278 LLM-written misinformation passages in eight styles, testing three open-weight models on commonsense reasoning, knowledge QA, and moral judgment. A relevant false passage costs a single agent 0.12-0.43 accuracy; irrelevant or content-free passages typically cost at most 0.06. Debate looks robust because uninformed agents outnumber misinformed ones. With one of three misinformed, it is no better than choosing the majority over equally exposed independent samples. Interaction helps only with a misinformed majority, recovering up to 0.24 accuracy over voting (0.29 under consensus). A one-sentence unreliability warning recovers up to 0.18 accuracy under voting (0.28 under consensus), at no significant cost under voting when context is true. Robustness should be judged against exposure-matched baselines, with prompt-level skepticism as cheap first defense.
Multiagent Systems (cs.MA); Computation and Language (cs.CL)
arXiv:2606.16710 [cs.MA]
(or arXiv:2606.16710v2 [cs.MA] for this version)
https://doi.org/10.48550/arXiv.2606.16710 Focus to learn more arXiv-issued DOI via DataCite
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Full text under the publisher's open licence · 280 words
Related coverage
Misinformation Propagation in Benign Multi-Agent Systems
arXiv · Jun 17, 2026

Would We See It Coming? Preference Falsification Cascades in Multi-Agent Systems
LessWrong · Aug 4, 2026
Skynet: Workflow-Level Anomaly Detection for Agentic AI via Semantic and Structural Modeling
arXiv · Sep 9, 2026
When Collaboration Becomes a Trigger: Collective Evidence-Threshold Backdoors in Multi-Agent Systems
arXiv · Aug 4, 2026